Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/3133382e3230342e37362e302f32322d3234203d3e20323633383739.roa
File: 3133382e3230342e37362e302f32322d3234203d3e20323633383739.roa (raw, json)
Hash identifier: P9XUlWWfzUbB7Chalbz4MplZw8Uc5R3ePjBfyTDIL+E=
Subject key identifier: 8F:6E:CE:10:EC:0A:C6:F5:E0:3A:BD:DA:1C:D7:37:2F:76:CE:05:E0
Certificate issuer: /CN=9D48DD09C613C17B78700988B70960307B101613
Certificate serial: 4DEF9CB3F4B2605738BE676371A30E88C7D51909
Authority key identifier: 9D:48:DD:09:C6:13:C1:7B:78:70:09:88:B7:09:60:30:7B:10:16:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D48DD09C613C17B78700988B70960307B101613.cer
Subject info access: rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/3133382e3230342e37362e302f32322d3234203d3e20323633383739.roa
Signing time: Tue 22 Aug 2023 15:25:30 +0000
ROA not before: Tue 22 Aug 2023 15:20:30 +0000
ROA not after: Tue 20 Aug 2024 15:25:30 +0000
asID: 263879
IP address blocks: 138.204.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ef:9c:b3:f4:b2:60:57:38:be:67:63:71:a3:0e:88:c7:d5:19:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D48DD09C613C17B78700988B70960307B101613
Validity
Not Before: Aug 22 15:20:30 2023 GMT
Not After : Aug 20 15:25:30 2024 GMT
Subject: CN=8F6ECE10EC0AC6F5E03ABDDA1CD7372F76CE05E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:47:29:43:57:e4:fa:18:74:6e:40:4f:0b:
b3:db:c5:b2:c7:47:e5:8c:63:ca:5a:88:a3:d3:19:
7b:74:1f:ef:2b:70:e1:6e:d5:98:c4:f2:02:27:3a:
18:5a:02:30:0a:12:dd:3b:36:a5:1a:90:dc:cf:42:
24:db:21:8d:3b:a5:c9:d4:9e:6e:70:bf:49:ec:dd:
1e:9f:8f:09:47:6c:bb:d0:62:c6:61:f5:13:88:80:
09:67:2b:d5:df:0b:82:80:ec:82:e9:04:d2:08:11:
0a:85:fb:75:af:ae:83:4d:44:86:e5:9f:a4:fd:73:
85:99:11:2d:8d:9d:5c:a0:21:97:7d:36:0e:3f:d4:
9a:ec:5b:ff:39:67:a8:3e:7d:69:63:3b:16:dc:dd:
46:bf:8e:47:15:ff:54:94:2d:63:11:e6:80:8a:b5:
29:5c:61:f3:d3:9d:f3:fb:97:cb:2b:8b:0a:f8:6a:
04:27:c1:21:69:25:7e:c1:23:a0:c3:82:f1:04:24:
2b:61:9b:30:50:96:46:2c:3b:4b:a6:b2:e3:3e:36:
bd:9e:2b:d2:a5:98:6a:35:a3:60:5b:94:45:60:85:
5c:db:e6:96:86:c0:32:d4:c3:4a:cd:01:9b:0b:da:
20:a8:62:dd:04:9e:18:af:0f:cf:51:a7:5f:34:a5:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6E:CE:10:EC:0A:C6:F5:E0:3A:BD:DA:1C:D7:37:2F:76:CE:05:E0
X509v3 Authority Key Identifier:
keyid:9D:48:DD:09:C6:13:C1:7B:78:70:09:88:B7:09:60:30:7B:10:16:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/9D48DD09C613C17B78700988B70960307B101613.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D48DD09C613C17B78700988B70960307B101613.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/0/3133382e3230342e37362e302f32322d3234203d3e20323633383739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:37:d1:f2:8d:44:b1:18:88:84:c1:db:f8:7e:a8:b0:f0:66:
c7:85:87:60:e9:45:4a:e1:73:14:7f:a1:7e:fd:06:ff:f3:8c:
32:d0:d1:71:c6:72:96:d7:8b:9f:04:10:59:77:ac:aa:ea:62:
a6:7c:98:e0:64:f3:56:84:8a:3e:cd:7e:ea:00:de:ae:31:bb:
2c:e9:2a:d4:03:b2:39:95:78:f8:cd:08:e9:bf:8c:a5:20:76:
21:1c:94:0f:6a:1a:dc:01:c4:eb:2e:48:81:7e:52:4d:18:d6:
49:3f:72:41:80:3e:d7:c3:df:aa:35:ca:c2:ab:32:31:dd:c3:
8b:e5:b0:ab:61:b8:a1:bf:9c:87:07:f8:af:b0:73:7b:33:e3:
10:c3:77:4f:df:ee:4a:23:45:85:0c:ef:a5:05:bd:e7:6d:3b:
b5:95:97:54:4d:0c:4f:9e:6a:4b:2d:e8:d2:79:87:c0:00:0a:
17:5f:64:4d:08:c9:a7:dd:00:46:a8:b2:bf:8f:99:6c:03:ba:
57:1f:99:63:61:36:7d:77:6d:3e:e9:ac:b3:86:e3:7a:01:df:
9e:80:be:e3:9b:f0:3a:f1:09:3e:87:59:36:4d:af:fa:5d:13:
92:0e:f7:f5:cd:05:4a:b9:7c:67:f7:3d:c4:36:72:c5:ea:70:
f3:10:34:83
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTe+cs/SyYFc4vmdjcaMOiMfVGQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ0OEREMDlDNjEzQzE3Qjc4NzAwOTg4QjcwOTYwMzA3
QjEwMTYxMzAeFw0yMzA4MjIxNTIwMzBaFw0yNDA4MjAxNTI1MzBaMDMxMTAvBgNV
BAMTKDhGNkVDRTEwRUMwQUM2RjVFMDNBQkREQTFDRDczNzJGNzZDRTA1RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtl0cpQ1fk+hh0bkBPC7PbxbLH
R+WMY8paiKPTGXt0H+8rcOFu1ZjE8gInOhhaAjAKEt07NqUakNzPQiTbIY07pcnU
nm5wv0ns3R6fjwlHbLvQYsZh9ROIgAlnK9XfC4KA7ILpBNIIEQqF+3WvroNNRIbl
n6T9c4WZES2NnVygIZd9Ng4/1JrsW/85Z6g+fWljOxbc3Ua/jkcV/1SULWMR5oCK
tSlcYfPTnfP7l8sriwr4agQnwSFpJX7BI6DDgvEEJCthmzBQlkYsO0umsuM+Nr2e
K9KlmGo1o2BblEVghVzb5paGwDLUw0rNAZsL2iCoYt0EnhivD89Rp180pQXvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUj27OEOwKxvXgOr3aHNc3L3bOBeAwHwYDVR0j
BBgwFoAUnUjdCcYTwXt4cAmItwlgMHsQFhMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjR0TTFHMml2TFVXdnQ2aEVBd0ZRYk5UWjRWaFRGY2ExSGptOGtHd3R5
aWMvMC85RDQ4REQwOUM2MTNDMTdCNzg3MDA5ODhCNzA5NjAzMDdCMTAxNjEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlENDhERDA5QzYxM0MxN0I3
ODcwMDk4OEI3MDk2MDMwN0IxMDE2MTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0dE0xRzJpdkxVV3Z0NmhFQXdGUWJOVFo0VmhURmNhMUhqbThrR3d0eWljLzAv
MzEzMzM4MmUzMjMwMzQyZTM3MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzODM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKzEwwDQYJKoZIhvcNAQELBQADggEBAGo30fKN
RLEYiITB2/h+qLDwZseFh2DpRUrhcxR/oX79Bv/zjDLQ0XHGcpbXi58EEFl3rKrq
YqZ8mOBk81aEij7NfuoA3q4xuyzpKtQDsjmVePjNCOm/jKUgdiEclA9qGtwBxOsu
SIF+Uk0Y1kk/ckGAPtfD36o1ysKrMjHdw4vlsKthuKG/nIcH+K+wc3sz4xDDd0/f
7kojRYUM76UFvedtO7WVl1RNDE+eakst6NJ5h8AAChdfZE0IyafdAEaosr+PmWwD
ulcfmWNhNn13bT7prLOG43oB356AvuOb8DrxCT6HWTZNr/pdE5IO9/XNBUq5fGf3
PcQ2csXqcPMQNIM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org